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Case Study: 1 
Mix Questions New (A) 


Question: 1 


Note: This question is part of a series of questions that present the same scenario. Each question on 
the series contains a unique solution that might meet the stated goals. Some question sets might 
have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 
questions will not appear in the review screen. 

You are designing a live streaming event by using Azure Media Services. The delivery of the video will 
use HTTP Live Streaming (HLS) to an Azure Content Delivery Network (CDN) streaming endpoint. 
Viewers of the content may not be a trusted party and you require the highest level of security. 

You must secure the media delivery by using dynamic encryption. 

Solution: Use AES-128 dynamic encryption and the key delivery service to encrypt all assets with an 
associated encryption key and authorization policy. Configure the assert’s delivery policy to deliver 
by using Advanced Encryption Standard (AES). 

Does the solution meet the goal? 


A. Yes 
B. No 


Answer: A 


Explanation: 


You can use Azure Media Services to secure your media from the time it leaves your computer 
through storage, processing, and delivery. With Media Services, you can deliver your live and on- 
demand content encrypted dynamically with Advanced Encryption Standard (AES-128) or any of the 
three major digital rights management (DRM) systems: Microsoft PlayReady, Google Widevine, and 
Apple FairPlay. 

References: 
https://docs.microsoft.com/en-us/azure/media-services/previous/media-services-content- 


protection-overview 


Question: 2 


A company has custom ASP.net and Java applications that run on old versions of Windows and Linux. 
The company plans to place applications in containers. 
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You need to design a solution that includes networking, service discovery, and load balancing for the 
applications. The solution must support storage orchestration. 

Solution: You create an Azure virtual network, a public IP address, and load balancer. Then add virtual 
machines (VMs) to the solution and deploy individual containers on them. 

Does the solution meet the goal? 


A. Yes 
B. No 


Answer: B 


Question: 3 


A company has custom ASP.net and Java applications that run on old versions of Windows and Linux. 
The company plans to place applications in containers. 

You need to design a solution that includes networking, service discovery, and load balancing for the 
applications. The solution must support storage orchestration. 

Solution: You deploy each application to an Azure Web App that has container support. 

Does the solution meet the goal? 


A. Yes 
B. No 


Answer: B 


Question: 4 


A company has custom ASP.net and Java applications that run on old versions of Windows and Linux. 
The company plans to place applications in containers. 

You need to design a solution that includes networking, service discovery, and load balancing for the 
applications. The solution must support storage orchestration. 

Solution: Deploy a Kubernetes cluster that has the desired number of instances of the applications. 
Does the solution meet the goal? 


A. Yes 
B. No 


Answer: A 


Explanation: 
References: 


https://docs.microsoft.com/en-us/azure/container-service/kubernetes/container-service-intro- 


kubernetes 


Question: 5 
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You are designing a storage solution to support on-premises resources and Azure-hosted resources. 
You need to provide on-premises storage that has built-in replication to Azure. 

Solution: You include Azure Table storage in the design. 

Does this solution meet the goal? 


A. Yes 
B. No 


Answer: B 


Question: 6 


You are designing a storage solution to support on-premises resources and Azure-hosted resources. 
You need to provide on-premises storage that has built-in replication to Azure. 

Solution: You include Azure Blob storage in the design. 

Does this solution meet the goal? 


A. Yes 
B. No 


Answer: B 


Question: 7 


You are designing a storage solution to support on-premises resources and Azure-hosted resources. 
You need to provide on-premises storage that has built-in replication to Azure. 

Solution: You include Azure StorSimple storage in the design. 

Does this solution meet the goal? 


A. Yes 
B. No 


Answer: A 


Explanation: 
References: 
https://docs.microsoft.com/en-us/azure/storsimple/storsimple-overview 


Question: 8 


HOTSPOT 

You manage a solution in Azure. You plan to add several new features to the solution. 
You identify the following requirements: 

The deployment technology must support load balancing and service discovery. 
Trigger a Biztalk Server workflow to process Electronic Data Interchange (EDI) data. 
You need to identify which technical implementation is suitable for each functionality. 


https://www.certkillers.net 


Questions & Answers PDF Page 5 


What should you recommend? To answer, select the appropriate options in the answer area. 
NOTE: Each correct selection is worth one point. 


Requirement Technology 


Trigger a BizTalk Server workflow. | E | 


Azure API Management Service 


Azure Container instances 


Azure Functions 


Azure Logic Apps 


Package the application. e | 


Git repository 
Azure Container instances 


NuGet package 


Node Package Manager (NPM) 


Answer: 
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Requirement Technology 


Trigger a BizTalk Server workflow. NA 


Azure API Management Service 


Azure Container instances 


Azure Functions 


Azure Logic Apps 


Package the application. y 


Git repository 


Azure Container instances 


NuGet package 
Node Package Manager (NPM) | 


Explanation: 
References: 


2.2.0#management-package 


Question: 9 


You are designing an Azure Web App that includes many static content files. 

The application is accessed from locations all over the world by using a custom domain name. 

You need to recommend an approach for providing access to the static content with the least amount 
of latency. 

Which two actions should you recommend? Each correct answer presents part of the solution. 

NOTE: Each correct selection is worth one point. 


A. Place the static content in Azure Blob storage and enable Content Delivery Network (CDN) on the 
account. 

B. Place the static content in Azure Table storage. 

C. Configure a custom domain name that is an alias for the Azure Storage domain. 

D. Configure a CNAME DNS record for the Azure Content Delivery Network (CDN) domain. 


Answer: CD 


Explanation: 
References: 
https://docs.microsoft.com/en-us/azure/architecture/best-practices/cdn 
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Question: 10 


You are designing a microservices architecture that will support a web application. 
The solution must meet the following requirements: 

Allow independent upgrades to each microservice. 

Deploy the solution on-premises and to Azure. 

Set policies for performing automatic repairs to the microservices. 

Support low-latency and hyper-scale operations. 

You need to recommend a technology. 

What should you recommend? 


A. Azure Container Instance 

B. Azure Container Service 

C. Azure Virtual Machine Scale Set 
D. Azure Service Fabric 


Answer: D 


Explanation: 
References: 
https://msdn.microsoft.com/en-us/magazine/mt595752.aspx 


Question: 11 


DRAG DROP 

A company runs multiple line-of-business applications in a Kubernetes container cluster. Source code 
for the applications resides in a version control repository which is a part of a continuous 
integration/continuous deployment (CI/CD) solution. 

You must be able to upgrade containerized applications without downtime after all tests and reviews 
have completed successfully. 

You need to recommend steps to go from source code to updated applications so that they can be 
automated in the CI/CD solution. 

Which four actions should you recommend be performed in sequence? To answer, move the 
appropriate actions from the list of actions to the answer area and arrange them in the correct order. 
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Actions Answer Area 


Update the DNS CNAME record of the application. 
Update the container. 

Push the image to the registry. 

Build the application 

Change the Azure Service Definition schema. 
Reconfigure the routing tables. 

Change the Azure Service Configuration file. 


Build the container image with the application. 


Answer: 


Build the application. 
Build the container image with the application. 
Push the image to the registry. 
Update the container. 
Explanation: 


References: 
https://docs.microsoft.com/en-us/vsts/build-release/apps/cd/azure/deploy-container-kubernetes 


Question: 12 


You have a customer database on your internal network. The database supports an application that 
your sales organization uses. You plan to migrate the application to the cloud. 

All customer data must remain inside the corporate network. 

You need to ensure that the application can access the customer data without affecting network 
security. 

What should you do? 


A. Open the ports required to access the database in the network firewall. 

B. Use Microsoft Azure Service Bus Relay to expose and consume a SOAP web service with TCP. 
C. Configure Direct Access on the virtual network. 

D. Create a Site-to-Site VPN connection. 
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Answer: D 


Explanation: 
References: 


https://docs.microsoft.com/en-us/windows-server/remote/remote-access/directaccess/directaccess 


Question: 13 


You are designing an Azure Media Services solution. The solution must meet the following 
requirements: 

Allow only authenticated users to play back media. 

Ensure that media playback uses dynamic and envelope encryption. 

Which three actions should you recommend? Each correct answer presents part of the solution. 
NOTE: Each correct selection is worth one point. 


A. Configure the media encoder to use AES clear key encryption. 

B. Encode source files into single-bitrate MP4 files. 

C. Configure a content key authorization policy. 

D. Configure the media encoder to use DRM encryption. 

E. Configure an asset delivery policy. 

F. Encode source files into adaptive-bitrate MP4 files. 

G. Encrypt the files using AES 256 bit encryption and upload to Azure Storage. 


Answer: B, C, E 


Explanation: 
References: 


protect-withaes128.md 


Question: 14 


HOTSPOT 

You are designing a solution that consist of Internet of Things (loT) devices and external streams of 
data. 

You need to provide near real-time functionality. 

Which technologies should you implement? To answer, configure the appropriate options in the 
dialog box in the answer area. 

NOTE: Each correct selection is worth one point. 
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Answer Area 
Requirement Technology 


Monitoring assets 


Azure loT Hub 
Azure Event Grid 


Azure Event Hubs 
Azure Time Series Insights 


Telemetry ingestion 


AA 


Azure Time Series Insights 


Providing real time predictions v 


Azure Time Series Insights 


i| Azure Stream Analytics 


Spotting anomalies on IoT data 


AA 
Azure IoT Hub 
Azure Event Grid 


Azure Event Hubs 


Azure Time Series Insights 
Azure Stream Analytics 


Answer: 
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Answer Area 
Requirement Technology 
Monitoring assets 
Azure Event Grid 
Azure Event Hubs | 
Azure Time Series Insights 
Azure Stream Analytics 


Telemetry ingestion 


Azure Event Grid 
Azure Event Hubs 

Azure Time Series Insights 
Azure Stream Analytics 


Providing real time predictions E 
Azure loi Hub 
Azure Event Grid 
Azure Event Hubs 


Azure Time Series Insights 


Spotting anomalies on IoT data | E 


Azure Stream Analytics 


Explanation: 
References: 


https://azure.microsoft.com/en-us/services/stream-analytics 
https://azure.microsoft.com/en-us/services/time-series-insights 


Question: 15 


A company uses Microsoft Operations Management Suite (OMS) to manage 1,000 virtual machines 
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(VMs) in Azure. 

The security officer reports that VMs often are not updated. You recommend to the company that 
they implement the OMS Update Management solution. 

You need to describe the OMS Update Management solution to the company. 

Which functionality does the OMS Update Management solution provide? 


A. assessment of antimalware on the VMs 

B. health indications for the OMS agent on VMs 

C. deployment of required updates to VMs 

D. assessment of vulnerabilities in container images\ 


Answer: C 


Explanation: 
References: 


management 


Question: 16 


HOTSPOT 

You are managing the automation of your company's Azure resources. 

You need to choose the appropriate tool to automate specific use cases. 

Which tool should you choose for each use case? To answer, select the appropriate tool from each list 
in the answer area. 

NOTE: Each correct selection is worth one point. 


Answer Area 
Use case Tool 
Automate a portfolio of scripts. E 
Azure Automation 
Desired State Configuration 
Create an ad hoc script to add MA 


a Virtual machine. Azure PowerShell 


Desired State Configuration 
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Answer: 
Answer Area 
Use case Tool 
Automate a portfolio of scripts. E 
Azure Automation 
| Desired State Configuration 
Create an ad hoc script to add E 


a Virtual machine. Azure PowerShell 


Desired State Configuration 


Explanation: 
References: 


https://docs.microsoft.com/en-us/azure/automation/automation-intro 
https://docs.microsoft.com/en-us/azure/virtual-machines/scripts/virtual-machines-windows- 
owershell-samplecreHYPERLINK "https://docs.microsoft.com/en-us/azure/virtual- 
machines/scripts/virtual-machines-windows-powershell-samplecreate-iis-using-dsc-auto"ate-iis- 


using-dsc-auto 
https://docs.microsoft.com/en-us/azure/automation/automation-dsc-compile 


Question: 17 


A company has a public-facing website that is being monitored using Microsoft Operations 
Management Suite (OMS). The OMS service map solution is deployed. 

Customers report that the website displays error messages and is very slow to load pages each day at 
04:00. 

The company plans to use the OMS Service Map solution to investigate the issues. 

You need to recommend actions that the company should perform with OMS Service Map. 

Which three actions should you recommend? Each correct answer presents a complete solution. 
NOTE: Each correct selection is worth one point. 


A. View alerts that show critical CPU utilization. 


B. Install updates to the device that hosts the website. 
C. Create a backup of the web server. 
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D. View the device that hosts the website. 
E. View the process that produced the alert. 


Answer: A, D, E 


Explanation: 
References: 


suite-servicemap 


Question: 18 


You have business services that run on an on-premises mainframe server. 

You must provide an intermediary configuration to support existing business services and Azure. The 
business services cannot be rewritten. The business services are not exposed externally. 

You need to recommend an approach for accessing the business services. 

What should you recommend? 


A. Connect to the on-premises server by using a custom service in Azure. 

B. Expose the business services externally. 

C. Expose the business services to the Azure Service Bus by using a custom service that uses relay 
binding. 

D. Move all business service functionality to Azure. 


Answer: D 


Explanation: 
References: 


httHYPERLINK  "http://azure.microsoft.com/en-gb/documentation/articles/service-bus-dotnet-how- 


azure.microsoft.com/en-gb/documentation/articles/service-bus-dotnet-how-to- 


Question: 19 


You are designing an Azure solution. 

The network traffic for the solution must be securely distributed by providing the following features: 
HTTPS protocol 

Round robin routing 

SSL offloading 

You need to recommend a load balancing option. 

What should you recommend? 


A. Azure Internet Load Balancer (ILB) 
B. Azure Load Balancer 

C. Azure Traffic Manager 

D. Azure Application Gateway 
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Answer: B 


Explanation: 
References: 


Question: 20 


You use a virtual network to extend an on-premises IT environment into the cloud. The virtual 
network has two virtual machines (VMs) that store sensitive data. 

The data must only be available using internal communication channels. Internet access to those 
VMs is not permitted. 

You need to ensure that the VMs cannot access Internet. 

Which two options should you recommend? Each correct answer presents a complete solution. 
NOTE: Each correct selection is worth one point. 


A. Azure ExpressRoute 

B. network interface (NIC) 

C. Source Network Address Translation (SNAT) 
D. Network Security Groups (NSG) 


Answer: A, D 


Explanation: 
References: 


https://docs.microsoft.com/en-us/azure/expressroute/expressroute-introduction 
https://reticent.net.nz/prevent-internet-access-from-azure-virtual-machines 


Question: 21 


A company hosts a website and exposes web services on the company intranet. The intranet is 
secured by using a firewall. Company policies prohibit changes to firewall rules. 

Devices outside the firewall must be able to access the web services. 

You need to recommend an approach to enable inbound communication. 

What should you recommend? 


A. the Azure Access Control Service 

B. Windows Azure Pack 

C. the Azure WCF Relay 

D. a web service in an Azure role that relays data to the internal web services 


Answer: C 


Explanation: 
References: 


https://docs.microsoft.com/en-us/azure/service-bus-relay/relay-what-is-it 
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Question: 22 


A partner manages on-premises and Azure environments. The partner deploys an on-premises 
solution that needs to use Azure services. The partner deploys a virtual appliance. 

All network traffic that is directed to a specific subnet must flow through the virtual appliance. 

You need to recommend solutions to manage network traffic. 

Which two options should you recommend? Each correct answer presents a complete solution. 
NOTE: Each correct selection is worth one point. 


A. Configure Azure Traffic Manager. 

B. Configure a routing table with forced tunneling. 
C. Implement an Azure virtual network. 

D. Implement Azure ExpressRoute. 


Answer: B, D 


Explanation: 
References: 


https://docs.microsoft.com/eHYPERLINK "https://docs.microsoft.com/en-us/azure/traffic- 
manager/traffic-manager-overview'n-us/azure/traffic-manager/traffic-manager-overview 


https://docs.microsoft.com/en-us/azure/expressroute/expressroute-routin 
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Question: 23 


You manage on-premises network and Azure virtual networks. 

You need a secure private connection between the on-premises networks and the Azure virtual 
networks. The connection must offer a redundant pair of cross connections to provide high 
availability. 

What should you recommend? 


A. virtual network peering 
B. Azure Load Balancer 

C. VPN Gateway 

D. ExpressRoute 


Answer: D 


Explanation: 
References: 
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview 


Question: 24 


DRAG DROP 

You are designing a solution that ingests, transforms, and stores streams of data from Internet of 
Things (loT) devices. 

The solution has the following requirements: 

Business users must be able to discover, understand, consume, and contribute to data creation. 
Transform data by using Spark. 

Data analysis must be performed by using a hub-and-spoke business intelligence model. 

You need to choose the appropriate products for the solution. 

Which technologies should you recommend? To answer, drag the appropriate technologies to the 
correct requirements. Each technology may be used once, more than one, or not at all. You may need 
to drag the split bar between panes or scroll to view content. 

NOTE: Each correct selection is worth one point. 
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Answer Area 
Products Requirement Product 
Azure Analysis Services Discover, understand. consume, | | 
and contribute data. Product | 
Azure Data Factory Transform data | Product | 
Azure Data Catalog Transform data analysis | Product | 
Azure Data Lake Analytics 
Answer: 
Answer Area 
Products Requirement Product 
Azure Analysis Services Discover, understand. consume, 3 
and contribute data. Azure Data Catalog 
Azure Data Factory Transform date Azure Data Factory 
Azure Data Catalog Transform data analysis Azure Data Factory 
Azure Data Lake Analytics 
Explanation: 
References: 


factory/transform-data-using-spark"-us/azure/data-factory/transform-data-using-spark 


analysis-services-general-availability-2/ 


Question: 25 


DRAG DROP 

You are designing an Azure storage solution for a company. 

The company has the following storage requirements: 

An app named App1 uses data analytics on stored data. 

App1 must store data on a hierarchical file system that uses Azure Active Directory (Azure AD) access 
control lists. 

An app named App2 must have access to object-based storage. 
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The storage must support role-based access control and use shared access signature keys. 

You need to design the storage solution. 

Which storage solution should you use for each app? To answer, drag the appropriate storage 
solutions to the correct apps. Each storage solution may be used once, more than once, or not at all. 
You may need to drag the split bar between panes or scroll to view content. 

NOTE: Each correct selection is worth one point. 


Answer area 


Storage solutions App Storage solution 
Azure Blob Storage Appl Storage solutions 
Azure File Storage App2 | Storage solutions | 


| | 
[ee ) 


Azure Data Lake Store 
Azure StorSimple virtual device 


Azure Site Recovery 


Answer: 


App Storage solution 
App] Azure Data Lake Store 


App2 Azure Blob Storage 


Explanation: 
References: 


https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-comparison-with-blob- 
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